Study. uk . com
  1. Home
  2. All questions
  3. Question 94

CompTIA Security+ study material · question 94 of 611

A penetration test report is filed after review and no findings are tracked. What is the consequence?

  1. The findings are automatically accepted by the authorising official
  2. The rules of engagement become void
  3. Unfixed findings stop being tracked, owned decisions
  4. The engagement must be repeated within thirty days
Show the answer

Answer: C. Unfixed findings stop being tracked, owned decisions

Results should feed the risk register, so a finding that is not fixed remains visible with an owner and a decision.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 8 Post-Testing Activities

Challenge yourself on this topic → Study as cards